Enroll with your coding agent
The link your admin sent is also a prompt. Paste it into Claude Code or Codex and say "enroll me".
Paste the enrollment link (or the one-line command that carries it) into the agent as-is and add "enroll me". The agent fetches its instructions from the link and runs the enrollment. It never asks you for a key.
If your org uses SSO, the agent prints a sign-in URL. Open it in any browser, on any machine, and finish signing in; the agent waits and carries on by itself. Without SSO there is nothing to open.
The agent lists each tool it configured (Claude Code, Codex, Cursor, whatever else it found) and which editors need a restart before they route.
The agent's doctor report shows the gateway reachable and each tool routed, and your admin sees
you on the console's Users page.
What the agent actually does
Every enrollment link has a runbook behind it, written for agents: https://app.anyray.ai/i/<code>/agent.md, where
<code> is the enl_… or tnt_… part of your link. Fetching /i/<code> with Accept: text/markdown returns the
same text. The runbook tells the agent to run the enrollment command detached, with --json appended:
curl -fsSL https://app.anyray.ai/i/<code> | sh -s -- --json
Connect then streams NDJSON events instead of prompting. sso_grant carries the sign-in URL the
agent hands you; enrolled and applied report the identity and the per-tool results; error
names what went wrong. The full event contract is on the CLI commands
page. The agent finishes with anyray-connect doctor --json and reports from that.
Your key never appears in the transcript: Connect mints it on your machine and stores it with
owner-only permissions, the events carry identity and tool names only, and the runbook forbids
printing keys, editing tool configs by hand, and sudo. A devcontainer or SSH host works the same
way; see remote and ephemeral machines.